ID-01: User MFA Registration

ID-01 is a security control that mfa blocks over 99.9% of account compromise attacks. even with a ca policy requiring mfa, users must actually register mfa methods to be protected. low registration means users are vulnerable. It requires that 95% or more of users have mfa methods registered and users have registered microsoft authenticator, security keys, or phone, break-glass accounts are excluded from this metric.

MFA blocks over 99.9% of account compromise attacks. Even with a CA policy requiring MFA, users must actually register MFA methods to be protected. Low registration means users are vulnerable.

ID-01 requires manual implementation. Users must register MFA methods themselves. Use Entra ID MFA registration campaign to prompt users.

This control can be implemented with any Microsoft 365 subscription, including free Azure AD.

ID-01 is included in the TrueConfig Recommended Secure baseline (Level 1). This is the foundation level suitable for most organizations.

ID-01 is rated critical because failure to implement this control significantly increases the risk of security incidents. MFA blocks over 99.9% of account compromise attacks. Even with a CA policy requiring MFA, users must actually register MFA methods to be protected. Low registration means users are vulnerable.